The posting
Intelligence, Security and Defence · Expert pool · Ad hoc contracting · Remote
Evenflow is expanding its Intelligence, Security and Defence practice and is building a pool of open-source intelligence (OSINT) specialists, to be contracted on an ad hoc basis as assignments arise: practitioners who collect, verify and exploit open-source material to a professional standard, not simply researchers who read what is already public. The role is built around tradecraft, from disciplined collection across the full source spectrum to the verification, attribution and defensible documentation of findings.
Experts in the pool will bring depth in the craft itself and the judgement to turn raw collection of information into clear, well-sourced assessments for European institutions and their partners.
The role
Core responsibilities include:
- Planning and executing OSINT collection across the full source spectrum (surface web, social media, forums, messaging platforms and, where lawful and appropriate, the deep and dark web) to satisfy intelligence requirements.
- Verifying and authenticating open-source material (imagery, video, documents, accounts), including geolocation, chronolocation, reverse-image and metadata analysis, and the detection of manipulated or synthetic media.
- Conducting technical OSINT and digital-infrastructure analysis (domains, IPs, DNS, certificates) and mapping online networks and relationships.
- Building and maintaining a safe, non-attributable collection capability, with rigorous operational security and managed attribution.
- Developing and documenting reproducible collection and verification methodologies, grading source reliability, and maintaining a clear chain of evidence.
- Turning collected information into concise, well-referenced written assessments and briefings to institutional standards (British English / EU conventions).
- Supporting the practice's geospatial and thematic work, which currently includes border security, irregular migration, human smuggling, cross-border crime and illicit networks.
- Advising colleagues and clients on OSINT tradecraft and standards, and keeping the team ahead of new sources, platforms and techniques.
What we are looking for
We are looking for a seasoned OSINT professional whose expertise is demonstrable in practice, not just on paper: someone who can find, verify and make sense of what others cannot, and who holds their own work to a high evidentiary standard.
Essential
- At least five years of hands-on experience in active and passive open-source collection, with a proven investigative track record.
- Advanced multi-source collection skills across the surface web, social media (SOCMINT), forums and messaging platforms, and familiarity with lawful collection from the deep and dark web.
- Strong verification tradecraft: geolocation and chronolocation of imagery and video, reverse-image search, metadata and EXIF analysis, and recognition of manipulated or AI-generated media.
- Technical OSINT capability, including digital-infrastructure analysis (domains, IPs, DNS, certificates) and the mapping of online networks.
- Managed attribution and operational security: safe, non-attributable collection using segregated environments, research personas and disciplined OPSEC.
- Scripting and automation for collection and processing (e.g. Python), including work with APIs and data extraction within legal limits.
- Rigorous verification methodology, source-reliability grading and documentation that make findings reproducible and defensible.
- A sound grasp of the legal and ethical framework governing OSINT, including lawful collection, data protection (GDPR) and ethical boundaries.
- Command of structured analytic techniques and estimative reasoning, and the ability to communicate findings in clear written form.
- Excellent written and spoken English (at least C1 level), including drafting to institutional style.
- A commitment to original, human-authored analysis and rigorous attribution.
- Proficiency with Microsoft Word, Excel and PowerPoint for report production.
- Availability to take on assignments at relatively short notice and to work remotely. Experts may be based anywhere; there is no requirement to be resident in the European Union.
Desirable
- Foreign-language collection ability, particularly Arabic, Russian, Farsi or French.
- Social-media and network/link analysis at scale, and experience detecting disinformation or influence operations.
- Financial or corporate OSINT (company registries, beneficial ownership, sanctions and PEP screening).
- Geospatial / GEOINT and satellite-imagery exploitation to corroborate open-source findings.
- Experience supporting investigations into border security, migration, cross-border crime or illicit networks.
- A record of published open-source investigations or contributions to the open-source investigations community.
- Recognised OSINT training or certification.
What we offer
Evenflow offers the opportunity to:
- Undertake substantive investigative work of real strategic consequence, with findings that inform decisions taken by European institutions and their partners.
- Deepen your tradecraft, build your capabilities, and represent your work with clients and at professional forums.
- Collaborate with a small, expert and collegiate team, with occasional travel to Brussels or client sites when required by an assignment.
- Benefit from clearly scoped assignments, contracted individually as requirements arise, with competitive daily rates.
- Work fully remotely, with the flexibility to combine assignments with your other professional commitments.
How to apply?
Applications should include:
- A curriculum vitae.
- A cover letter.
- A sample of published or previous OSINT work (redacted as necessary).
- An original open-source investigation of your choice, on a current matter of relevance to European security, setting out the findings and the collection and verification methodology used.
The original piece must be entirely your own work and human-authored. The use of generative AI in its preparation is not permitted, and any submission flagged by AI-detection screening will not be considered.
Applications to the expert pool must be submitted by 2 November 2026. Suitable applicants will be invited to an interview, held online or in person in Brussels depending on circumstances, and successful candidates will be added to the pool and contracted as and when assignments arise.
In accordance with the GDPR, Evenflow processes your data solely for the purposes of this recruitment process. By submitting an application, you consent to the processing and storage of your data, which will be made available to the Directors and to the administrative personnel responsible for recruitment. You may withdraw your application and consent at any time by writing to [email protected].
About Evenflow
Based in Brussels, Evenflow is a consultancy specialised in Earth observation and geospatial applications. Its Intelligence, Security and Defence practice delivers multi-source geospatial and geopolitical analysis to European institutions and agencies, combining satellite-imagery exploitation with open-source research to support decision-making on security and geopolitical questions.
